Nortel Networks BCM50a Network Router User Manual


 
Chapter 14 Certificates 263
BCM50a Integrated Router Configuration — Basics
Table 65 describes the labels in the Figure 84.
Table 65 My Certificate create
Label Description
Certificate Name Type up to 31 ASCII characters (not including spaces) to identify this
certificate.
Subject Information Use these fields to record information that identifies the owner of the
certificate. You do not have to fill in every field, although the
Common Name is mandatory. The certification authority can add
fields (such as a serial number) to the subject information when it
issues a certificate. Nortel recommends that each certificate have
unique subject information.
Common Name Select a radio button to identify the owner of the certificate by IP
address, domain name, or e-mail address. Type the IP address (in
dotted decimal notation), domain name, or e-mail address in the field
provided. The domain name or e-mail address can be up to 31
ASCII characters. The domain name or e-mail address is for
identification purposes only and can be any string.
Organizational Unit Type up to 127 characters to identify the organizational unit or
department to which the certificate owner belongs. You can use any
character, including spaces, but the BCM50a Integrated Router
drops trailing spaces.
Organization Type up to 127 characters to identify the company or group to which
the certificate owner belongs. You can use any character, including
spaces, but the BCM50a Integrated Router drops trailing spaces.
Country Type up to 127 characters to identify the nation where the certificate
owner is located. You can use any character, including spaces, but
the BCM50a Integrated Router drops trailing spaces.
Key Length Select a number from the drop-down list to determine how many bits
are used for the key (512 to 2 048). The longer the key, the more
secure it is. A longer key also uses more PKI storage space.
Enrollment Options These radio buttons deal with how and when the certificate is to be
generated.
Create a
self-signed
certificate
Select Create a self-signed certificate to have the BCM50a
Integrated Router generate the certificate and act as the Certification
Authority (CA) itself. This way you do not need to apply to a
certification authority for certificates.